Thus an attacker may produce a project or a single board file in .pcb or .lht format -that contains the above config settings, executing arbitrary code on the +that contains the above config settings, executing arbitrary shell command on the user's computer when pcb-rnd opens or saves the file or loads fonts or footprints or netlists.